Description
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atlassian | Jira Align | >= 11.14.0, >= 11.14.1, >= 11.15.0, >= 11.15.1, >= 11.16.0 | < 11.14.0 |